This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/6iaqLomTHcn35nOgS7u2_TW-xhs.roa File: 6iaqLomTHcn35nOgS7u2_TW-xhs.roa (raw, json) Hash identifier: Mi7/BGP/3N9pUm1kAumWXNagsUDM+4h/oInYolOAkPE= Subject key identifier: EA:26:AA:2E:89:93:1D:C9:F7:E6:73:A0:4B:BB:B6:FD:35:BE:C6:1B Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B7DD7CF9481E754A410467BB47958 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/6iaqLomTHcn35nOgS7u2_TW-xhs.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211798 IP address blocks: 185.232.41.0/24 maxlen: 24 193.46.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7d:d7:cf:94:81:e7:54:a4:10:46:7b:b4:79:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea26aa2e89931dc9f7e673a04bbbb6fd35bec61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:c6:54:eb:39:3e:17:98:13:29:26:53:7f: 05:b2:47:75:fb:6a:6d:6c:87:09:5b:a2:fa:f8:db: ad:0a:db:0c:63:06:21:b1:ff:e6:f9:b9:b9:76:cb: 5f:24:a7:96:aa:a4:78:35:9c:4a:63:c4:26:61:20: 0f:ad:c4:46:cb:e3:96:e4:e9:a9:ea:a7:31:cc:a1: b2:ca:13:60:75:4e:e6:0b:fa:d6:05:4c:d7:37:98: 8d:3e:5d:4a:89:e8:48:14:d9:0d:39:67:73:e7:74: a7:c0:07:94:c5:a3:d7:3c:f5:3a:1d:0d:60:64:ed: dd:7b:4f:b1:6c:8a:5b:b6:b8:15:de:1e:1a:30:13: fe:d5:37:05:1e:9c:ad:93:1f:df:ed:4d:3e:d2:5a: 9a:25:a3:54:83:d8:b4:1c:10:9e:fb:36:29:74:35: 31:b1:d4:d7:54:c3:9c:4e:8e:db:27:64:b9:42:c4: e8:57:44:80:6e:88:3f:77:04:db:b4:8a:7a:c5:13: 75:15:2e:99:52:9a:a2:94:b4:85:2f:83:bb:a2:fc: a8:d7:e8:e2:87:56:a2:c1:5c:a4:e4:a6:2c:fe:60: ea:d0:57:4e:d7:a8:52:c9:3e:70:31:82:1c:da:10: c4:28:8d:e3:1d:93:6c:f9:48:91:9a:bb:b2:8a:e0: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:26:AA:2E:89:93:1D:C9:F7:E6:73:A0:4B:BB:B6:FD:35:BE:C6:1B X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/6iaqLomTHcn35nOgS7u2_TW-xhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.41.0/24 193.46.216.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:6f:7b:63:9e:fe:d2:86:76:95:2d:2d:43:6f:fb:bc:84:f6: bb:c5:9a:3f:ff:5e:b0:57:73:6a:3f:4e:3a:b6:55:2f:d5:50: 37:7b:df:11:0b:49:ad:c4:b4:90:fd:18:c9:83:47:69:10:07: 8b:d0:1d:f2:ec:19:fe:2e:8c:23:d1:25:d5:98:82:32:cc:15: 01:57:45:73:48:ab:b7:2c:20:de:e4:a8:54:0d:1b:f8:ce:35: 7c:42:2c:1f:b7:a5:91:46:56:ee:47:6e:02:92:79:22:9c:8f: d9:49:e4:6e:00:94:1b:90:30:a5:1f:d2:c7:79:c8:58:c9:6c: b1:d2:c8:ab:9a:c8:0b:9b:87:41:c1:d6:33:4a:75:d3:07:a8: 8f:58:01:b2:c7:c8:b6:75:9f:48:bd:5b:1b:b4:99:66:3e:05: d4:c8:71:e0:26:fb:a0:bb:d4:90:28:3b:bb:08:2b:06:a5:0d: 01:ad:b1:82:a5:e4:39:e0:6f:c9:0d:c0:16:33:4a:5e:59:99: 17:f0:34:76:06:2c:e5:26:45:19:f1:28:4b:ba:96:ed:a9:30: 9a:2b:dd:35:30:51:55:c1:1f:7c:22:16:b7:f7:b3:d1:1a:e5: d8:34:96:2a:0d:ef:c1:61:95:1f:4d:45:56:b9:73:43:e1:dc: 2e:80:7d:3d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W33Xz5SB51SkEEZ7tHlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTI2YWEyZTg5OTMxZGM5ZjdlNjczYTA0YmJiYjZmZDM1YmVjNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouPGVOs5PheYEykmU38Fskd1+2pt bIcJW6L6+NutCtsMYwYhsf/m+bm5dstfJKeWqqR4NZxKY8QmYSAPrcRGy+OW5Omp 6qcxzKGyyhNgdU7mC/rWBUzXN5iNPl1KiehIFNkNOWdz53SnwAeUxaPXPPU6HQ1g ZO3de0+xbIpbtrgV3h4aMBP+1TcFHpytkx/f7U0+0lqaJaNUg9i0HBCe+zYpdDUx sdTXVMOcTo7bJ2S5QsToV0SAbog/dwTbtIp6xRN1FS6ZUpqilLSFL4O7ovyo1+ji h1aiwVyk5KYs/mDq0FdO16hSyT5wMYIc2hDEKI3jHZNs+UiRmruyiuBK0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOomqi6Jkx3J9+ZzoEu7tv01vsYbMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvNmlhcUxvbVRIY24zNW5PZ1M3dTJfVFcteGhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuegpAwQA wS7YMA0GCSqGSIb3DQEBCwUAA4IBAQALb3tjnv7ShnaVLS1Db/u8hPa7xZo//16w V3NqP046tlUv1VA3e98RC0mtxLSQ/RjJg0dpEAeL0B3y7Bn+Lowj0SXVmIIyzBUB V0VzSKu3LCDe5KhUDRv4zjV8Qiwft6WRRlbuR24CknkinI/ZSeRuAJQbkDClH9LH echYyWyx0sirmsgLm4dBwdYzSnXTB6iPWAGyx8i2dZ9IvVsbtJlmPgXUyHHgJvug u9SQKDu7CCsGpQ0BrbGCpeQ54G/JDcAWM0peWZkX8DR2BizlJkUZ8ShLupbtqTCa K901MFFVwR98Iha397PRGuXYNJYqDe/BYZUfTUVWuXND4dwugH09 -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:14 2026 by rpki-client